Déclaration de confidentialité
Thank you for visiting our website www.infastaub.de ("Website") and for your interest in our company. On the occasion of your visit to our website, we also process personal data within the meaning of Art. 4 No. 1 DSGVO ("data") from you. We are aware of the importance of the data entrusted to us. The protection of your privacy when processing your data is an important concern for us, which we take into account in our business processes. Your data will be handled in accordance with the legal requirements for data protection.
I. Responsible authority and data protection officer
The responsible authority pursuant to Art. 4 No. 7 DSGVO for the processing of your data in connection with this website is:
Infastaub GmbH, Niederstedter Weg 19, 61348 Bad Homburg, Germany
Tel.: +49 (0) 6172 30980, E-mail: infa@infastaub.de, website: www.infastaub.de
You can reach Infastaub's data protection officer as follows:
Alkemade IT-Security e.K., Egerländer Str. 9, D-61239 Ober-Mörlen, Germany
Tel.: +49 (0) 6002 939593, Fax: +49 (0) 6002 939685, E-mail: info@alkemade-it.de
2. Purpose of data processing, legal basis, storage period, recipients and third country transfer
Depending on the purpose of the processing, your data may be processed on a different legal basis. When operating our website, we are partly supported by order processors who process your data on our behalf and on our instructions and are thus recipients of your data ("service providers"). In addition, your data may also be disclosed to other companies.
In the following, we name the different purposes for which your data may be processed on our website, stating the relevant legal basis as well as an indication of the storage period. We will also tell you whether this company is a service provider and whether any transfer of your data will take place outside the European Economic Area ("EEA").
a. Calling our website and log file
In order to display our website on your device, it is technically necessary for our web server, on which our website is hosted, to process data from you. For this purpose, we process your IP address together with information about your browser type and the version used, your operating system, your internet service provider, the date and time of your access, the internet page from which you accessed our website and the sub-websites you accessed in a server log file. A service provider assists us with hosting.
Your data is processed in accordance with Art. 6 Para. 1 lit. f) DSGVO. The processing of your IP address is necessary to protect our legitimate interests in the accessibility and correct presentation of our website. The additional storage of your data in a server log file serves to protect our legitimate interests in operating our website securely and without errors and in being able to detect, limit and eliminate faults and errors.
Your data in our server log file will be automatically deleted 7 days after visiting our website.
b. Contact
On our website, we give you the opportunity to contact us on various topics.
If you contact us using our contact form, the mandatory information you must provide is marked as such. This information is required in order to process your enquiry. All other information is voluntary and only serves to answer your enquiry more precisely. You can also contact us by telephone, e-mail, post or fax. The data we process from you in this context may vary depending on the communication channel, but will regularly include your first and last name, address, telephone number, e-mail address and fax number.
If your contact is directed towards the conclusion of a contract or is in connection with a contract, we process your data on the basis of Art. 6 para. 1 lit. b) DSGVO. If your contact is of a general nature, we process your data in accordance with Art. 6 para. 1 lit. f) DSGVO on the basis of our legitimate interests in answering your enquiry about our company and/or our offers individually and in the best possible way.
We delete your data, if it is related to a contractual relationship, only after the expiry of retention periods under commercial or tax law, which can be up to 6 years. These periods regularly begin at the end of the year in which you contacted us. We delete all other data when your enquiry has been finally clarified and we are not subject to any legal obligation to retain the corresponding data.
c. Newsletter
If you register for our newsletter on our website, we process your e-mail address as the only mandatory information. We need this for sending the newsletter. The provision of further data is voluntary.
The legal basis for the data processing associated with the dispatch of the newsletter is Art. 6 para. 1 lit. f) DSGVO. We have a legitimate economic interest in using the consent you have given us to receive the newsletter in accordance with Section 7 (2) of the German Unfair Competition Act (UWG) in order to be able to address you directly in this way and to inform you about our group of companies.
In addition, we analyse your reading behaviour with regard to the newsletter by means of a so-called "pixel", which is downloaded when the newsletter is opened. In order to retrieve the pixel, it is necessary to process your IP address and information about your browser and system. By using the pixel, it is possible for us to know whether you have opened the newsletter, when you opened it and which links you have clicked.
The analysis of your usage behaviour of our newsletter is based on Art. 6 para. 1 lit a) DSGVO.
We delete your data processed by us in connection with the sending of our newsletter upon revocation of your consent to receive the newsletter, but not before the expiry of statutory limitation periods in connection with the sending of the newsletter.
We are supported in the provision of our newsletter by a service provider who is based in the EEA.
d. Applications
On our website you can find out about current vacancies and apply for them. Please refer to the relevant job offer for details of how to apply and what information is required for the application process. Please note that a separate privacy policy applies to the application process, which will be made available to you in due course.
e. Technically necessary cookies
Cookies are small files that are sent by us to the browser of your terminal device during your visit to our website and stored there. On our website, we use technically necessary cookies to ensure the basic functions of our website. The cookies contain a so-called session ID, with which various requests from your terminal device during your visit to our website can be assigned.
The legal basis for the associated processing of your data is Art. 6 para. 1 lit. f) DSGVO. The use of technically necessary cookies is necessary to protect our legitimate interests in the retrievability, correct presentation and ensuring the full functionality of our website.
Technically necessary cookies are deleted at the latest after you have closed the browser you are using.
If you do not wish cookies to be set on your end device, you can control this centrally via the browser you are using. You can also delete cookies via your browser.
However, blocking or deleting cookies may result in the usability of our website being noticeably restricted for you.
f. Consent management
We also use technically non-essential cookies on our website. When you first visit our website, we ask you for your consent to the use of such services. To manage your consent, i.e. whether you have given or refused consent, we store corresponding data in a cookie on your terminal device so that we can recognise you when you visit our website again and do not ask for consent again. In doing so, we process your IP address, the time of your visit to our website as well as information about your browser and your terminal device.
The associated processing of your data is based on Art. 6 para. 1 lit. f) DSGVO and serves our legitimate interest in enabling you to use our website as pleasantly as possible.
The cookie has a lifespan of one year, unless you delete it in your browser beforehand.
g. Google Analytics
We use the Google Analytics tool of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google Ireland") on our website.
Google Analytics enables us to analyse and evaluate the use of our website in order to compile reports on the website activities of our visitors based on this information. Google Analytics also creates pseudonymised usage profiles of website visitors. Through the use of Google Analytics, technically non-essential cookies as well as online identifiers (including cookie identifiers), IP addresses and your device identifiers are used. We use Google Analytics exclusively with the "Anonymize-IP" extension, which deletes part of your IP address before it is transmitted to Google Ireland. Google Ireland is a service provider in the context of the use of Google Analytics.
The use of Google Analytics is based on your consent given to us in accordance with Art. 6 (1) a) DSGVO.
The information collected through the use of Google Analytics is deleted after 9 or 18 months(https://policies.google.com/technologies/ads). When Google Analytics is used, Google Ireland acts as a service provider. We have therefore concluded an order processing agreement with Google Ireland, which also covers Google Analytics and can be accessed via the following link: https://privacy.google.com/businesses/processorterms/. Due to the case law of the European Court of Justice, in particular in the case C-40/17 - Fashion ID, we are prepared to conclude a joint responsibility agreement with Google Ireland pursuant to Art. 26 DSGVO. Such a contract is currently not provided by Google Ireland.
The use of Google Analytics results in a transfer of your data to the USA. The European Commission has not issued an adequacy decision for data transfers to the USA. However, part of the contract for commissioned processing concluded between us and Google Ireland are the so-called standard contractual clauses, which constitute a suitable guarantee for a third country transfer in accordance with Art. 46 (1), (2) (c) DSGVO.
You can prevent the transfer of data to Google Ireland by downloading and installing the browser plugin available at the following link:http://tools.google.com/dlpage/gaoptout?hl=de.
h. YouTube integration
On our website we use a YouTube iframe provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google Ireland").
We have embedded the YouTube iframe in order to enable you to play videos on our website that we have selected and that are hosted on YouTube. In the process, your IP address is also transmitted to YouTube. Each time you visit a sub-page of our website on which a YouTube iframe is used, YouTube can track that you have visited this sub-page. If you are logged in to YouTube at the same time, the information collected is assigned to your Google account. You can only prevent this by logging out of YouTube.
The use of YouTube is based on Art. 6 para. 1 lit. f) DSGVO and serves our legitimate interests in an appropriate company presentation.
We do not know how Google handles your data, in particular whether there is a transfer of your data to a country outside the EEA. General information on the processing of your data by Google can be found in the Google privacy policy: https://policies.google.com/privacy.
We use the "Activate extended data protection mode" setting so that Google does not set any cookies to analyse user behaviour when embedding the videos.
i. reCAPTCHA
We use Google reCAPTCHA from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google Ireland") on our website.
The use of Google reCAPTCHA enables us to recognise visitors to our site as natural persons and thus prevent misuse of our site by automated bots. For this purpose, your interaction with our site is analysed automatically and in the background (e.g. mouse movements).
The use of Google reCAPTCHA is based on Art. 6 para. 1 lit. f) DSGVO and serves our legitimate interests in ensuring the trouble-free operation of our website.
By using Google reCAPTCHA, Google Ireland collects data about you and sets cookies on your terminal device. Further details on how Google reCAPTCHA works can be found on the following page: https://www.google.com/recaptcha/about/.
We do not know how Google Ireland handles your data, in particular whether your data is transferred to a country outside the EEA. General information on the processing of your data by Google Ireland can be found in the Google privacy policy: https://policies.google.com/privacy.
j. Google Fonts
We use the Google Fonts service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google Ireland") on our website.
Using Google Fonts, we can embed and display fonts on our website that Google Ireland makes available on its own servers. When you visit our website, your browser reloads the fonts we have embedded in order to display them on our website. For this purpose, your browser connects to Google's servers and your IP address is processed in this way. According to Google Ireland's own representation, no cookies are set on your terminal device through the use of Google Fonts (https://developers.google.com/fonts/faq#what_does_using_the_google_fonts_api_mean_for_the_privacy_of_my_users).
The use of Google Fonts is based on Art. 6 para. 1 lit. f) DSGVO and serves our legitimate interests in reducing the loading times of our website.
We do not know how Google Ireland handles your data, in particular whether your data is transferred to a country outside the EEA. For general information on the processing of your data by Google Ireland, please refer to the Google privacy policy: https://policies.google.com/privacy
k. Facebook
We maintain a so-called fan page on www.facebook.com/infastaub.
When you visit our fan page, various data are collected and processed. For some of the processing of your data that takes place on www.facebook.com, we are jointly responsible with Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook Ireland") for data protection; for other data processing, we alone or Facebook Ireland alone are responsible.
If you contact us on Facebook, we will process your name and other information that you provide to us directly or via the comment function. We are solely responsible for this processing of your data. The processing of this data that you provide to us is based on Art. 6 (1) f) DSGVO and pursues our legitimate interests in an appropriate and interactive company presentation.
We are jointly responsible with Facebook Ireland for the Facebook "Page Insights" function, with which we receive statistical evaluations of your use of and interaction with our Fanpage in aggregated and anonymised form. You can view the joint responsibility agreement in accordance with Art. 26 DSGVO at the following link:
https://de-de.facebook.com/legal/terms/page_controller_addendum
Facebook Ireland is solely responsible for any further unilateral processing of your data by Facebook Ireland, in particular with regard to a potential transfer of your data to the USA. Facebook Ireland uses cookies and other technologies to collect data from you. You can find out for what purposes and on what legal basis this processing takes place in the Facebook data policy (https://www.facebook.com/policy.php). Please note that Facebook Ireland may collect and process data about you when you visit the website www.facebook.com/ even if you do not have a Facebook account or are not logged in to Facebook. However, we do not know what data Facebook Ireland collects from you and for what purposes it is processed.
l. Instagram
We maintain an Instagram account.
Basically responsible for processing your data when you visit the website www.instagram.com/ is Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook Ireland"). Facebook Ireland uses cookies and other technologies to collect data from you. You can find out for what purposes and on what legal basis this processing takes place in the Instagram privacy policy (https://help.instagram.com/519522125107875) and Instagram's information on cookies used (https://help.instagram.com/1896641480634370). Please note that Facebook Ireland may collect and process data about you when you visit the website www.instagram.com/ even if you neither have an Instagram account nor are logged in to Instagram. However, we do not know what data Facebook Ireland collects from you and for what purposes it is processed.
However, we do process data about you that you share with us via Instagram and that is publicly viewable. The processing of this data is based on Art. 6 para. 1 lit. f) DSGVO and pursues our legitimate interests in an appropriate and interactive company presentation.
Facebook Ireland offers us the opportunity to measure and analyse the interactions of visitors to our Instagram channel via the "Instagram Insights" function. However, this only gives us access to aggregated and anonymised data that does not allow any conclusions to be drawn about the individual user.
m. LinkedIn
We maintain a presence on www.linkedin.com.
When you visit our website, various data is collected and processed. For some of the processing of your data that takes place on www.linkedin.com, we have entered into a data protection agreement with the
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn Ireland"), for some of the processing of your data that takes place on. For other data processing, we alone or LinkedIn Ireland alone are responsible.
If you contact us on LinkedIn, we will process your name and other information that you provide to us. We are solely responsible for this processing of your data. The processing of this data that you provide to us is based on Art. 6 (1) (f) DSGVO and pursues our legitimate interests in an appropriate and interactive company presentation.
We are jointly responsible with LinkedIn Ireland for the "Page-Insights" function, with which we receive statistical evaluations of your use of and interaction with our presence in aggregated and anonymised form. You can view the joint responsibility agreement in accordance with Art. 26 DSGVO under the following link:
https://legal.linkedin.com/pages-joint-controller-addendum
LinkedIn Ireland is solely responsible for any further unilateral processing of your data by LinkedIn Ireland, in particular with regard to a potential transfer of your data to the USA. LinkedIn Ireland uses cookies and other technologies to collect data from you. You can find out for what purposes and on what legal basis these processing operations are carried out in the LinkedIn Cookie Policy https://de.linkedin.com/legal/cookie-policy?trk=homepage-basic_footer-cookie-policy) and the LinkedIn Privacy Policy (https://de.linkedin.com/legal/privacy-policy?trk=lithograph_footer-privacy-policy).
Please note that LinkedIn Ireland may collect and process data about you when you visit the website www.linkedin.com even if you neither have a LinkedIn account nor are logged in to LinkedIn. However, we do not know what data LinkedIn Ireland collects from you and for what purposes it processes it.
n. xing
We maintain a xing website at www.xing.com/pages/infastaubgmbh.
Basically responsible for processing your data when you visit the website www.xing.de is New Work SE, Dammtorstraße 30, 20354 Hamburg ("New Work").
New Work uses cookies and other technologies to collect data from you. You can find out for what purposes and on what legal basis this processing takes place in New Work's data protection declaration (https://privacy.xing.com/de/datenschutzerklaerung/informationen-die-wir-auf-grund-ihrer-nutzung-von-xing-automatisch-erhalten). Please note that New Work may collect and process data about you when you visit the website www.xing.de even if you do not have a xing account or are not logged in to xing.
However, we do process data about you that you provide to us via xing and that is publicly viewable. The processing of this data is based on Art. 6 para. 1 lit. f) DSGVO an.
o. Google maps
On some of our pages, maps and city maps of the map service Google Maps of the provider Google (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) are integrated. When you call up a page with an embedded map, your browser establishes a connection to Google's servers. Google can assign this information to your Google account. For more information, please see Google's privacy policy at www.google.de/intl/de/policies/privacy/; you can find an opt-out option at: adssettings.google.com/authenticated.
3. Recipients of the data
When you visit our website, the recipients of your data are initially only the service providers and companies named above. In addition, service providers engaged by us support us in the maintenance, care and further development of our website, who only process your data on our instructions and on our behalf. For internal administrative purposes, your data may also be passed on to other companies associated with us.
Your data will only be passed on beyond this on the basis of a legal obligation, such as to authorities or for the defence, assertion, exercise or defence of legal claims.
4. Third country transfer
The use of the companies mentioned under 2. g) to m) may result in a transfer of your data to a third country and thus outside the EEA. Details can be found in the respective presentation
5. Your rights
In accordance with the provisions of the GDPR, you may assert the following rights against us:
- Right to information (Art. 15 DSGVO),
- Right to rectification (Art. 16 DSGVO),
- Right to erasure (Art. 17 DSGVO),
- Right to restriction of processing (Art. 18 GDPR),
- Right to data portability (Art. 20 DSGVO).
You have the right to revoke consent given to us at any time with effect for the future. In addition, you can object to the processing of your data described here for the purpose of safeguarding legitimate interests at any time with effect for the future in accordance with Art. 21 DSGVO. If the processing is not for direct marketing purposes, the right to object only exists for reasons arising from your particular situation. You can also complain to a supervisory authority at any time. The supervisory authority responsible for us is:
The Hessian Commissioner for Data Protection and Freedom of Information
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Dating 21.04.2021